Skip to main content

AWS Elastic Load Balancing

Elastic Load Balancing (ELB) automatically distributes incoming application traffic across multiple targets and virtual appliances in one or more Availability Zones (AZs).

AWS Elastic Load Balancing

This pack includes Cortex XSIAM content.

Important Notes

  • Time in this pack is parsed with the calculaton of UTC 00:00+.

Configuration on Server Side

When you enable access logs for your load balancer, you must specify the name of the S3 bucket where the load balancer will store the logs. The bucket must have a bucket policy that grants Elastic Load Balancing permission to write to the bucket.

Follow the steps:

  1. Create an S3 bucket, as described here.
  2. Attach a policy to your S3 bucket, as described here.
  3. Configure access logs, as described here.
  4. Verify bucket permissions, as described here.

Collect Events from Vendor

In order to use the collector, use the XDRC (XDR Collector) option.

XDRC (XDR Collector)

To create or configure the Amazon S3 collector, use the information described here.

You can configure the specific vendor and product for this instance.

  1. Navigate to SettingsData Sources &rarr Add Data Source.

  2. Click Amazon S3.

  3. Click Connect or Connect Another Instance.

  4. Select the Access Key or Assumed Role filter, according to the implementation method of your choice.

  5. When configuring the new Amazon S3 data source, set the following values:

    Parameter Value
    SQS URL Enter SQS URL.
    Name Enter ELB.
    Role ARN/AWS Client ID Enter Role ARN / AWS Client ID.
    External Id/AWS Client Secret Enter External Id / AWS Client Secret.
    Log Type Enter Generic.
    Log Format Enter Raw.
    Compression Enter uncompressed.
For additional information, see here.




Cortex XSIAM


CertificationRead more
Supported ByCortex
CreatedFebruary 8, 2024
Last ReleaseFebruary 8, 2024

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.